CVE-2025-24304

arkcompiler_ets_runtime has an out-of-bounds write vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds write.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-27534

arkcompiler_ets_runtime has an out-of-bounds read vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker case DOS through missing release of memory.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-22851

Liteos_A has an integer overflow vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-22842

arkcompiler_ets_runtime has an out-of-bounds read vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-20102

arkcompiler_ets_runtime has an out-of-bounds read vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-22452

arkcompiler_ets_runtime has an out-of-bounds read vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-24298

liteos_a has an UAF vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-24844

communication_dsoftbus has a missing release of memory vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-24925

applications_settings has a missing release of memory vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-25212

pasteboard has an improper input vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through improper input.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-25278

liteos_a has a race condition vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through race condition.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-26690

communication dsoftbus has a NULL pointer vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-27128

liteos_a has an UAF vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-27536

arkcompiler_ets_runtime has a type confusion vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through type confusion.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-27562

communication_dsoftbus has a missing release of memory vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-27577

liteos_a has a race condition vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through race condition.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-20626

Arkcompiler Ets Runtime has an UAF vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.

CVSS 3.1 · 3.8 Low EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-21098

Liteos-A has an insecure storage of sensitive information vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause information leak through out-of-bounds read bypass permission check.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-22847

Arkcompiler Ets Runtime has an out-of-bounds read vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony

CVE-2025-23234

Arkcompiler Ets Runtime has a buffer overflow vulnerability

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through buffer overflow.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Openatom Openharmony

Products

Openharmony Openharmony